iotaledger / iotaledger/product-core
RUSTSEC-2025-0141: Bincode is unmaintained
- Dominant language
- Rust
- Stars
- 0
- Forks
- 2
- Avg merge
- 1h 29m
- Merged PRs (30d)
- 3
Description
> Bincode is unmaintained
| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `bincode` |
| Version | `1.3.3` |
| URL | [https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md](https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md) |
| Date | 2025-12-16 |
Due to a doxxing and harassment incident, the bincode team has taken the decision to cease development permanently.
The team considers version 1.3.3 a complete version of bincode that is not in need of any updates.
## Alternatives to consider
* [wincode](https://crates.io/crates/wincode)
* [postcard](https://crates.io/crates/postcard)
* [bitcode](https://crates.io/crates/bitcode)
* [rkyv](https://crates.io/crates/rkyv)
See [advisory page](https://rustsec.org/advisories/RUSTSEC-2025-0141.html) for additional details.
Contributor guide
Research direction
Start by reading the RUSTSEC-2025-0141 advisory and checking where product-core uses the bincode 1.3.3 package. Compare the listed alternatives and determine the project's required migration scope; done means the unmaintained dependency is addressed and the relevant checks pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100